Skip to content
Redhat Openshift Container Platform vulnerabilities
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via race condition in autofs responder
CVE-2026-104045
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via incomplete identity provider authentication requests
CVE-2026-104046
6.2 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
CVE-2026-104048
6.8 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: information disclosure via query injection in entra id lookups
CVE-2026-104047
5.3 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion
CVE-2026-88252
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
CVE-2026-104039
4.7 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
CVE-2026-104032
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via memory exhaustion in autofs responder
CVE-2026-104031
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read in autofs responder
CVE-2026-104029
3.3 Low
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
CVE-2026-104030
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
CVE-2026-90462
5.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
CVE-2026-90996
4.0 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: local denial of service due to null pointer dereference in pam responder
CVE-2026-90995
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 more
Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
CVE-2026-19617
Fix available
5.5 Medium
-
red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 more
Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
CVE-2026-19548
Fix available
5.5 Medium
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
CVE-2026-71227
Fix available
5.1 Medium
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more
Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
CVE-2026-71226
Fix available
7.3 High
-
smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more
Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
CVE-2026-71225
Fix available
6.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
CVE-2026-68743
Fix available
5.5 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
CVE-2026-68744
Fix available
3.3 Low
-
gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
CVE-2026-18477
Fix available
4.4 Medium
-
gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 more
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
CVE-2026-18508
Fix available
4.4 Medium
-
fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
CVE-2026-68742
Fix available
5.5 Medium
-
p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 more
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
CVE-2026-13757
Fix available
6.2 Medium
-
kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +9 more +11 more
Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
CVE-2026-13595
Fix available
6.8 Medium
-
openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +18 more +20 more
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
CVE-2026-55653
Fix available
4.3 Medium
-
thekelleys dnsmasq, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more
Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies
CVE-2026-12725
Fix available
5.9 Medium
-
redhat openshift container platform, windows machine config operator, red hat openshift container platform 4 +4 more +6 more
Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft
CVE-2026-54100
8.3 High
-
redhat openshift container platform, windows machine config operator, red hat openshift container platform 4 +5 more +7 more
Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters
CVE-2026-54099
8.8 High
-
red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +7 more +9 more
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
CVE-2026-1784
8.8 High
-
redhat openshift container platform, red hat openshift container platform 4 +1 more
Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation
CVE-2026-10533
5.0 Medium
-
axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
CVE-2026-44495
Fix available
7.0 High
-
redhat openshift router, red hat openshift container platform 4.12, openshift container platform 4.13 +10 more +12 more
Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
CVE-2026-46579
7.4 High
-
redhat openshift router, red hat openshift container platform 4, openshift container platform 4.17 +7 more +9 more
Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation
CVE-2026-42965
7.7 High
-
opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
CVE-2026-48864
Fix available
7.8 High
-
samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 more
Samba: samba: remote code execution in printing subsystem via unescaped job description
CVE-2026-4480
Public exploitFix available
EPSS 13.9%
9.0 Critical
-
samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 more
Samba: remote code execution in samr
CVE-2026-4408
Public exploitFix available
9.0 Critical
-
samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +22 more +24 more
Samba: group policy certificate enrollment uses http:// without validation
CVE-2026-3012
Fix available
8.0 High
-
samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more
Samba: vfs_worm does not block directory modification
CVE-2026-2340
Fix available
6.5 Medium
-
samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +26 more +28 more
Samba: missing access check on reparse point operations
CVE-2026-1933
Fix available
7.1 High
-
opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
CVE-2026-9149
Fix available
6.5 Medium
-
opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
CVE-2026-9150
Fix available
6.5 Medium
-
linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more
net: skbuff: preserve shared-frag marker during coalescing
CVE-2026-46300
In KEVPublic exploitFix available
EPSS 16.1%
7.8 High
-
gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more
Gnutls: gnutls: authentication bypass via nul character in username
CVE-2026-42010
Fix available
7.1 High
-
gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +32 more +34 more
Gnutls: gnutls: denial of service via dtls zero-length fragment
CVE-2026-33845
Fix available
7.5 High
-
gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +13 more +15 more
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
CVE-2026-3832
Fix available
3.7 Low
-
gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +31 more +33 more
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
CVE-2026-3833
Fix available
6.5 Medium
-
gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 more
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
CVE-2026-42009
Fix available
7.5 High
-
redhat openshift container platform, red hat openshift container platform 4 +1 more
Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection
CVE-2026-7309
4.3 Medium
-
xmlsoft libxml2, ibm aix, vios +10 more +12 more
Libxml2: libxml2: denial of service via crafted xsd-validated document
CVE-2026-6732
Fix available
6.5 Medium
- Show olderLoading…